|Publication number||US6959384 B1|
|Application number||US 09/543,750|
|Publication date||Oct 25, 2005|
|Filing date||Apr 5, 2000|
|Priority date||Dec 14, 1999|
|Also published as||US7340602, US7882351, US8762711, US9401896, US20050235154, US20080222420, US20110126084, US20140289523, US20160292458|
|Publication number||09543750, 543750, US 6959384 B1, US 6959384B1, US-B1-6959384, US6959384 B1, US6959384B1|
|Original Assignee||Intertrust Technologies Corporation|
|Export Citation||BiBTeX, EndNote, RefMan|
|Patent Citations (5), Non-Patent Citations (8), Referenced by (172), Classifications (17), Legal Events (4)|
|External Links: USPTO, USPTO Assignment, Espacenet|
This application claims priority from U.S. Provisional Patent Application Ser. No. 60/170,828, entitled “Systems and Methods for Authenticating and Protecting the Integrity of Data Streams and Other Data,” filed Dec. 14, 1999, and is related to commonly-assigned U.S. Provisional Patent Application Ser. No. 60/138,171, entitled “Method and System for Watermarking Data,” filed Jun. 8, 1999, and commonly-assigned U.S. patent application Ser. No. 09/276,233, entitled “Methods and Apparatus for Persistent Control and Protection of Content,” filed Mar. 25, 1999, each of which is hereby incorporated by reference.
A portion of the disclosure of this document contains material that is subject to copyright protection. The copyright owner has no objection to the facsimile reproduction of the patent document or the patent disclosure as it appears in the Patent and Trademark Office files or records, but otherwise reserves all copyrights whatsoever.
The present invention relates generally to the communication and storage of electronic data. More specifically, the present invention relates to systems and methods for authenticating and protecting the integrity of electronic information using cryptographic techniques.
As electronic commerce grows in popularity, there is an increasing need for systems and methods that protect the rights and interests of the parties involved. One class of problems faced by those conducting transactions remotely via electronic communications networks such as the Internet is that of authenticating messages received from others and providing ways for others to authenticate one's own messages. For example, a party to an electronic transaction will typically want assurance that the other parties are who they purport to be. A party will also want to prevent attackers from misappropriating its identity by, e.g., forging its signature or otherwise assuming its identity in interactions with others. A related problem is that of verifying the integrity of an electronic communication—that is, verifying that the content of the communication has not been modified—when, due to transmission errors, malicious tampering, or a variety of other factors, this may not be the case.
A variety of authentication and validation schemes have been proposed, ranging from the use of passwords to the use of cryptographic signatures. In general, these schemes rely on the existence of a secret shared between the parties to a transaction. By demonstrating knowledge of the shared secret, the parties are able to authenticate themselves to one another. Many cryptographic signature schemes are based on public key cryptography. In public key cryptography, a party creates a signature by applying a strong cryptographic hash algorithm (e.g., SHA-1) to a plaintext message and encrypting the result with the party's private key. The signature message is often as big as the private key modulus, which is typically much larger than the output from the hash algorithm. To verify the signature, a recipient needs to obtain the full message, hash it, decrypt the signature using the signer's public key, and compare the decrypted signature with the hash of the message. If the computed hash is equal to the decrypted signature, then the message is deemed to be authentic.
A problem with the approach shown in
One way to adapt the traditional signature scheme described above for use with streaming applications is to break message 100 into subparts, and to sign each subpart separately. However, this approach has several drawbacks. For example, it can require a relatively large amount of processing power, since both the signature issuer and the signature verifier need to perform numerous relatively-costly public and/or private key operations. In addition, this approach is relatively costly in terms of bandwidth and/or storage requirements, as inserting a large number of cryptographic signatures into the stream can noticeably increase the stream's size. Yet another drawback of this approach is that it fragments the signed message into a set of unrelated, signed sub-messages. This can be less secure and more inconvenient than working with a single, atomic document, as it can be difficult, for example, to determine whether the sub-messages have been received in the correct order. Thus, there is a need for systems and methods that overcome some or all of these limitations by providing relatively fast, secure, and efficient authentication of data streams and other electronic content.
The present invention provides systems and methods for securely verifying and protecting the integrity of electronic data streams and other types of electronic data. It should be appreciated that the present invention can be implemented in numerous ways, including as a process, an apparatus, a system, a device, a method, or a computer readable medium such as a computer readable storage medium or a computer network wherein program instructions are sent over optical or electronic communication lines. Several inventive embodiments of the present invention are described below.
In one embodiment, a method is disclosed for encoding a digital file in a manner designed to facilitate authentication of a streamed transmission of the file. In accordance with this embodiment, a progression of check values is generated, each check value in the progression being derived from a hashed portion of the file and from at least one other check value in the progression. A file is encoded by inserting each check value into the file in proximity to the portion of the file to which it corresponds. The encoded file is then transmitted to a user's system where it can be authenticated on-the-fly using the check values.
In another embodiment, a computer program product is disclosed for encoding data in a manner designed to facilitate authentication of a streamed data transmission. The computer program product preferably includes computer code for generating a progression of check values, each check value being derived, at least in part, from at least one other check value in the progression and from a hash of a portion of the data. Computer code is also provided for inserting each check value into the data in proximity to the portion of data to which it corresponds. Additional computer code is operable to send a streamed transmission of the encoded data to a user's system, where it is authenticated on-the-fly using the check values. The computer codes are contained on a computer readable medium such as a CD-ROM, DVD, MINIDISC, floppy disk, magnetic tape drive, flash memory chip, ROM, RAM, system memory, hard drive, optical storage, and/or a data signal embodied in a carrier wave.
In yet another embodiment, a computer program product is provided for verifying the integrity of a block of data. The computer program product preferably includes computer code for receiving a first portion of the block of data, and for receiving first and second check values in a chain of check values, each check value in the chain being derived from a corresponding portion of the block of data and from at least one other check value in the chain. Computer code is provided for using the first check value to verify the integrity of the first portion of the block of data and of the second check value. Computer code is also provided for allowing use of the first portion of the block of data if its integrity is successfully verified.
In another preferred embodiment, a system for performing fault-tolerant authentication of a stream of data is provided. The system includes a receiver for receiving sub-blocks of the stream, error-check values corresponding to the sub-blocks, and verification values in a chain of verification values associated with the stream, each verification value being derived from a sub-block of the stream and at least one other verification value in the chain. The system also includes error-detection logic operable to use the received error-check values to detect errors in corresponding sub-blocks of the stream. Error-handling logic is also provided, the error-handling logic being operable to record the detection of errors by the error-detection logic, and to block the receipt of additional sub-blocks if a predefined error condition is satisfied. The system also includes authentication logic, the authentication logic being operable to use the received verification values to verify the integrity of data sub-blocks, other verification values, and error-check values in the stream.
In yet another embodiment, a method for authenticating a block of data is disclosed. The method includes receiving a first sub-block of the block of data, a first error-check value, a first check value, and a second check value, wherein the first check value and the second check value form part of a progression of check values associated with the block of data, each check value in the progression being derived, at least in part, from a sub-block of the block of data and at least one other check value in the progression. In accordance with this method, the first error-check value is used to detect corruption of the first sub-block. Upon detecting corruption, the first check value and the first error-check value are used to verify the integrity of the second check value.
In another embodiment of the present invention, a method is disclosed for encoding a block of data in a manner designed to facilitate fault-tolerant authentication. In accordance with this method, a progression of check values is generated, each check value in the progression being derived from a portion of the block of data and from at least one other check value in the progression. The block of data is encoded by inserting the check values and error check values into the block in proximity to the portions of the block to which they correspond. The error-check values can be used to detect errors in the blocks of data, and, if errors are found, can be used to help authenticate the check values in the progression. The encoded block of data is transmitted to a user's system, the user's system being operable to receive and authenticate portions of the encoded block of data before the entire block is received.
In another preferred embodiment, a method is disclosed for encoding a digital file in a manner designed to facilitate secure quasi-random access to the file. In accordance with this method, a multi-level hierarchy of hash values is generated from the digital file, where the hash values on a first level of the hierarchy are at least partially derived from the hash values on a second level of the hierarchy. A root hash value is digitally signed, the root hash value being derived from each of the hash values in the hierarchy. The signed root hash value and at least a portion of the rest of the hierarchy are stored on a computer readable medium for use in verifying the integrity of the digital file.
In another preferred embodiment, a method for securely accessing a data block is disclosed. The method includes selecting a portion of the data block and retrieving from storage a corresponding root verification value and one or more check values in a hierarchy of check values, wherein the hierarchy of check values is derived, at least in part, from an uncorrupted version of the data block. The root verification value is used to verify the integrity of the other check values. A calculated check value is obtained by hashing a first sub-block of the data block, the first sub-block including at least part of the selected portion of the data block. The calculated check value is compared with an appropriate one of the stored check values, and at least part of the selected portion of the data block is released for use if the calculated check value equals the stored check value.
In yet another preferred embodiment, a system for providing secure access to a data file is provided. The system preferably includes a memory unit for storing a digital signature and a plurality of hash values related to the data file, the digital signature and the plurality of hash values forming a hierarchy. The system includes a processing unit, logic for decrypting the digital signature to obtain a root verification value, hash verification logic for using the root verification value to verify the integrity of one or more hash values in the hierarchy, and logic for selecting a portion of the data file for use. A hashing engine is provided for calculating a hash of a data sub-block, the data sub-block including at least part of a selected portion of the data file. A first comparator is used to compare the hash of the data sub-block with a verified hash value in the hierarchy. Control logic is operable to release the data sub-block for use if the calculated hash equals the previously-verified hash.
These and other features and advantages of the present invention will be presented in more detail in the following detailed description and the accompanying figures which illustrate by way of example the principles of the invention.
The present invention will be readily understood by the following detailed description in conjunction with the accompanying drawings, wherein like reference numerals designate like structural elements, and in which:
A detailed description of the present invention is provided below. While the invention is described in conjunction with several embodiments, it should be understood that the invention is not limited to any one embodiment. On the contrary, the scope of the invention is limited only by the appended claims, and the invention encompasses numerous alternatives, modifications and equivalents. For example, while several embodiments are described in the context of a system and method for viewing or playing video, audio, or multimedia data, those skilled in the art will recognize that the disclosed systems and methods are readily adaptable for broader application. For example, without limitation, the present invention could be readily applied to the secure transmission and use of computer software or virtually any other type of information (hereinafter referred to collectively as “data,” unless otherwise noted). In addition, while numerous specific details are set forth in the following description in order to provide a thorough understanding of the present invention, the present invention can be practiced according to the claims without some or all of these details. Finally, for the purpose of clarity, certain technical material that is known in the art related to the invention has not been described in detail in order to avoid unnecessarily obscuring the present invention.
Systems and methods are disclosed for enabling the recipient of a cryptographically-signed electronic communication to verify the authenticity of the communication on-the-fly, thus obviating the need to receive and store the entire communication before verifying its signature and releasing it to the end user. The systems and methods disclosed herein are believed to be as secure as conventional signature schemes which do not support on-the-fly signature verification. Moreover, the efficiency of the disclosed systems and methods compares favorably with the efficiency of conventional techniques in terms of processing time and memory usage. Thus, the present invention advantageously provides systems and methods for reducing the bandwidth, storage, and/or processing requirements of secure communications systems.
As shown in
The operation of system 202 is controlled primarily by programs contained in system memory 218 and executed by the system's processing unit 216. These programs preferably include modules for accepting input data and for processing the input data in accordance with the techniques described herein. For example, system 202 preferably includes modules for generating hash values, digital signatures, and other metadata relating to the input data, and also preferably includes modules for storing and/or transmitting some or all of the metadata and input data. One of ordinary skill in the art will appreciate, however, that some or all of the functionality of these modules could be readily implemented in hardware without departing from the principles of the present invention.
Referring now to
As shown in
As described in more detail below, input verification logic 284 is used to verify the authenticity of streaming data 296 received from network 203 via network interface 275, and/or to verify the authenticity of data contained in system memory 246, on disk 280, or on other storage media. Input verification logic 284 preferably includes signature verification logic 285 for unsigning signed data, and a hashing engine 286 for performing hashing operations. Although in one embodiment input verification logic 284 is implemented in firmware stored in ROM 250 and executed by processor 244, one skilled in the art will appreciate that input verification logic 284 could alternatively be implemented using optional circuitry 270, programs 272 stored in RAM 248, or any other suitable combination of firmware, circuitry, and/or application programs.
In yet another embodiment, input verification logic 284 is implemented in a special protected processing environment (PPE) 288, such as a chip or a tamper-resistant software module. As shown in
The structure and operation of encoding and decoding systems 202 and 204 will now be described in more detail with reference to
The next sub-block, Pn−1 410, of data block 400 is processed in a similar manner. Specifically, the hash of sub-block Pn−1 410 is calculated, and the result, H(Pn−1) 412, is combined with H(Cn) 408. The combination of H(Pn−1) 412 and H(Cn) 408 is hashed to yield H(Cn−1) 414, which is used in the processing of the next sub-block, Pn−2 418. As discussed previously, a separate combination step can be eliminated by simply feeding H(Pn−1) 412 and H(Cn) 408 directly into hashing module or circuitry 415. In addition, one of ordinary skill in the art will appreciate that in practice, encoding system 202 may include only one hash module, as opposed to a separate hash module or circuit for each sub-block (e.g., 408, 415, etc.), as shown in
The process described in the preceding paragraph is repeated for each sub-block, Pi, of file 400, and the last check value, H(C1) 422, is signed by, e.g., encrypting it with the encoder's private key 423 to yield signed block S(H(C1)) 424. Thus, after one complete processing pass over data block 400, encoding system 202 generates a check value, H(Ci), for each sub-block, Pi, and a digital signature for at least the final sub-block, P1 425. These hash values and the signature are stored in memory 218.
To transfer data block 400 to a recipient 204, encoding system 202 first sends S(H(C1)) 424, the sub-block to which S(H(C1)) 424 corresponds (i.e., P1 425), and check value H(C2) 421. Encoding system 202 then continues to send successive sub-blocks, Pi, and check values, H(Ci+1)—moving left to right in FIG. 4—until the entire file has been transmitted. If it is desired to keep file 400 secret during transmission, the sub-blocks, Pi, and optionally the check values, H(Ci), can be encrypted before they are sent; however, this is not necessary for purposes of practicing the present invention.
The structure and operation of the decoding logic used by recipient 204 when receiving a file will now be described with reference to
As each sub-block Pi in the file is received (508), the hash of the sub-block is calculated using the same hashing function used by encoding system 202 in block 302 of
If the two values are equal, then sub-block Pi and check value H(Ci+1) are deemed to be authentic, and the sub-block can be released for use (518). The check value is then updated (520), and the entire process (508–522) is repeated for the next sub-block and check value that are received.
However, if comparison block 514 indicates that H(Ci′) is not equal to H(Ci)′, then Pi is judged to be unauthentic, as an inequality at block 514 indicates that Pi and/or H(Ci+1) were modified after being processed by encoding system 202. Upon detecting such a condition, decoding system 204 is preferably operable to take appropriate defensive action 516. For example, decoding system 204 can terminate the connection with the source of the data, prevent the user from making further use of the data, display a warning or error message on display 262, shut itself down, shut down the application that was receiving or using the file, or simply record the occurrence of this condition for later reporting or action. Although decoding system 204 could optionally continue playing or making use of the file even after an inequality was detected at block 514, the file would no longer be authenticated with the security of the digital signature, thus making it possible for a clever attacker to mount an attack at relatively little cost compared with that of cracking the signature.
Next, comparison block 607 compares H(C1′) 612 with check value H(C1)′ 605. If these two values are equal, then the decoding system can be satisfied that P1′ 606 and H(C2)′ 610 are authentic (i.e., that they are equal to P1 425 and H(C2) 421, respectively, from encoding system 202). Decoding system 204 then releases content P1′ 606 for use by the system, saves H(C2)′ 610 for later use in authenticating the next block of data, P2′ 616, and continues the process of receiving and authenticating successive blocks in stream 600. If, on the other hand, comparison 607 fails, decoding system 204 can terminate further receipt of data stream 600 and/or take other defensive action.
The next sub-block, P2′ 616, of stream 600 is processed in a substantially similar manner. Specifically, the hash of sub-block P2′ 616 is calculated, and the result, H(P2′) 618, is combined with H(C3)′ 620. The combination of H(P2′) 618 and H(C3)′ 620 is hashed to yield H(C2′) 622. H(C2′) 622 is compared with H(C2)′ 610, which was authenticated in connection with the authentication of P1′ 606, as described in the preceding paragraph. If the comparison indicates that the two values are equal, then P2′ 616 and H(C3)′ 620 are deemed to be authentic; otherwise, appropriate defensive measures are taken.
The basic process set forth in the preceding paragraph is repeated for each sub-block, Pi′ of stream 600, as shown in
As shown in
Another problem that arises in the authentication of data streams and other data files is that of errors introduced by the communication system and/or storage media. For example, burst errors can occur in a network communication due to electromagnetic interference, faulty connections, and/or lost or delayed packets of data. Similarly, data stored on, and retrieved from, computer readable media can suffer from bit errors due to defective storage cells or read/write errors, and these errors can cause data to be lost or misinterpreted.
Although such errors are often benign, in that they may not evidence a malicious intent to tamper with the system, they can nevertheless interfere with attempts to securely authenticate data communications, as bit errors in either the plaintext message, the check values, or the encrypted signature will typically cause authentication to fail. Yet if transmission of a file is simply aborted each time a portion of the file fails to verify, random bit errors may force a user attempting to access a relatively large file to restart the transmission multiple times before he or she is eventually able to obtain a perfect, verifiable copy of the file.
This result is especially undesirable, as errors resulting from the unreliability of storage and communications media are often too small to be detected by users. Moreover, even when such errors are detectable, users will typically prefer to continue receiving the stream of content, rather than restart reception from the beginning. For example, in the case of a user listening to a streamed audio report, the user will typically wish to hear the entire report from start to finish, even if bit errors add occasional noise, rather than have to restart the report each time an error is detected. In short, users will often be willing to sacrifice signal quality in order to avoid the alternative of restarting reception of the signal each time an error is detected, as restarting reception effectively eviscerates one of the primary benefits of streaming delivery—i.e., the ability to use data as it is being delivered, instead of having to wait until an entire file is received. Thus, there is a need for authentication schemes that exhibit fault tolerance.
The present invention solves the problem described above while requiring only a small amount of additional data to be inserted into the transmitted data stream, as shown in
In a preferred embodiment, the detection of errors at block 706 is recorded, so that the decoding system can detect unduly high levels of such errors and take appropriate defensive action. For example, the system might simply sum the detected errors (708) and compare the running total with a threshold or a threshold percentage (710). Alternatively, the pattern of detected errors between blocks can be recorded and analyzed, so that suspicious patterns can be detected (e.g., errors in more than a predefined number of consecutive blocks, errors at the same position in comparable groups of blocks, etc.), even though the gross amount or percentage of errors may not exceed a given threshold. It should be appreciated, however, that any suitable error response could be used without departing from the principles of the present invention.
In one embodiment additional fault tolerance is provided by accounting for errors that may occur in the included hash, H(Pi)′ 802. Errors in H(Pi)′ can lead to inappropriate rejection of the content, since if H(Pi′) 803 is replaced by a corrupted H(Pi)′ 802—i.e., a “no” output from comparison 706—comparison 808 can be expected to fail even if block Pi′ has not been corrupted. Thus, in one embodiment if H(Pi′) 803 is replaced by H(Pi)′ 802 for a given block, and an inequality is later detected by comparison 808, blocks 810 and 812 are executed again using the computed hash H(Pi′) 803 instead of the included hash H(Pi)′ 802. If comparison 808 then succeeds, the recipient can be confident that data Pi′ is authentic. Thus, this embodiment prevents errors in the included hash from causing incorrect invalidity assessments to be made about Pi′. It will be appreciated however, that given the relative size differential between the included hash value H(Pi)′ and the data block Pi′ to which it corresponds—typically on the order of 20 bytes for the hash versus 64 KB for the block (or 0.03%)—correct handling of this relatively rare condition may not, in a given application, be worth the extra cost it imposes in memory usage and/or chip-count.
Thus, the mechanism described above provides fault tolerance while avoiding serious compromise to the security offered by the authentication process. This would not be the case, for example, if a certain number of failed comparisons 514 were allowed in the process shown in
Another problem facing signature-based authentication schemes is that of providing some degree of random access to the signed data in a manner that does not compromise the ability to detect unauthentic data. For example, a user may wish to access a track in the middle of a CD or database without having to listen to each of the preceding tracks and/or without having to wait for each track to be authenticated. However, if the root signature is at the beginning of the CD or database, allowing access to a track in the middle, without first verifying the authenticity of each intervening block of data and each block's corresponding check value, would break the chain of trust connecting the intermediate track to the root signature.
In one embodiment secure content navigation and quasi-random access are enabled by constructing a tree of hash values, the tree deriving its security in substantially the same manner as the hash chain described above in connection with
As shown in
If any of the loaded hash values fail to authenticate (i.e., a “Not OK” exit from block 1108), control passes to a verification failure handler to take appropriate defensive action (1110). The verification failure handler may, for example, simply display an error message to the user and terminate further access to the content. Or, in another embodiment, the verification error handler may re-compute the hash value(s) that failed to verify, using the appropriate portion of the stored content file. The recomputed hash values can then be combined, hashed, and compared with the original signature. Such an approach can be useful if the hash values, but not the content or the signature, have been corrupted. In other embodiments, other error handling techniques are used.
Referring once again to
As successive portions of content are accessed (e.g., 1204 b, etc.), their hashes are computed and compared with the corresponding authenticated hash values on the stack. As shown in
In a preferred embodiment, content blocks are loaded into, e.g., RAM 248 or RAM 290 of the user's system 204 prior to authentication, and after authentication the blocks are released for use directly therefrom. This procedure helps prevent an attacker from substituting unauthentic content for content that has been authenticated, e.g., by overwriting the authenticated content in insecure memory. Thus, in a preferred embodiment the integrity of content is verified (or re-verified) each time it is retrieved from insecure memory for use.
The approach illustrated in
In addition, real-time processing requirements can be reduced by pre-authenticating successive portions of the tree in a pipelined fashion. For example, as shown in
Similarly, each group of level-three hashes 1412 is hashed to yield a calculated level-two hash 1410. Each calculated level-two hash 1410 is compared with its corresponding, stored level-two hash 1408. If any such comparison fails, then the appropriate error handler is called; otherwise, the stored level-three hashes 1412 are deemed to be authentic. As shown in
Once the hash tree has been verified (i.e., once the process shown in
For example, in one embodiment only the hash values 1012 at the lowest level (i.e., the nth level) of the tree are maintained in secure memory. Since the lower hash values derive their security from having been checked against the root signature (or values derived therefrom), compromise to security is avoided as long as the lower hash values are maintained in secure memory after they have been authenticated. Moreover, since the entire tree preferably remains stored in non-volatile memory 251, ROM 250, and/or disc 280, some or all of the tree is available to be reloaded into secure memory 290 and re-authenticated if the need arises.
The process of authenticating a block of content (e.g., block 1112 in
As previously discussed, any suitable defensive measure(s) could be used. For example, in one embodiment further access to the content (or at least the unauthentic block) is denied. Alternatively (or in addition), an error handling routine could be called (1505) to determine (e.g., based on the frequency, number, or pattern of errors) whether to permit access to the block despite its failure to authenticate, or whether to prevent or terminate access to the block instead. For example, if the block size is small enough that allowing a certain level of unauthentic content to be used would not unduly compromise the interests being protected by the authentication scheme, then allowing use to proceed despite the detection of some errors may be desirable. On the other hand, if absolute integrity is required—e.g., as might be the case with an important applet or other executable program, where single bit errors could disrupt or modify the program's operation—then the error handler will preferably prevent access to, or execution of, the file if the authentication of any block fails.
Note, however, that the granularity of the authentication scheme need not limit the granularity of the actual access that is allowed. The authentication granularity simply relates to the amount of computation that is performed by the authentication scheme before content is released. For example, a portable device may allow the user to jump to an arbitrary point within a content file, irrespective of the granularity of the authentication scheme; however, the granularity of the authentication scheme would dictate the amount of computation needed to authenticate the content before it was released.
Thus it can be seen that there will typically be some tradeoff between the amount of computational resources and the amount of memory required by the authentication scheme. At one extreme, where only the root of the tree is maintained in memory, the memory requirements are relatively low (e.g., the size of a signature or hash), while the dynamic computation requirements are relatively high, as the entire hash tree must be computed dynamically before any given piece of content is released. At the other extreme (and in one preferred embodiment), dynamic computation requirements are minimized by storing hashes from the lowest level of the tree in secure memory, thus allowing any given content block to be authenticated simply by computing a hash and performing a comparison. Since the hash values are typically small in comparison with the size of the content blocks from which they are derived, the space consumed by the tree will usually be relatively small. For example, if the hash of a 512-byte content block is 20 bytes, and a tree is constructed for 1024 content blocks (i.e., approximately 500 kilobytes of data), the amount of dynamic memory needed to store the relevant hash values would only be about 420 bytes if the approach shown in
Although the foregoing invention has been described in some detail for purposes of clarity of understanding, it will be apparent that certain changes and modifications may be practiced within the scope of the appended claims. It is emphasized that there are many alternative ways of implementing both the processes and apparatuses of the present invention. Accordingly, the present embodiments are to be considered illustrative and not restrictive, and the invention is not to be limited to the details given herein, but may be modified within the scope and equivalents of the appended claims.
|Cited Patent||Filing date||Publication date||Applicant||Title|
|US4218582||Oct 6, 1977||Aug 19, 1980||The Board Of Trustees Of The Leland Stanford Junior University||Public key cryptographic apparatus and method|
|US4309569||Sep 5, 1979||Jan 5, 1982||The Board Of Trustees Of The Leland Stanford Junior University||Method of providing digital signatures|
|US5373561||Dec 21, 1992||Dec 13, 1994||Bell Communications Research, Inc.||Method of extending the validity of a cryptographic certificate|
|US5835595 *||Sep 4, 1996||Nov 10, 1998||At&T Corp||Method and apparatus for crytographically protecting data|
|US6009176 *||Feb 13, 1997||Dec 28, 1999||International Business Machines Corporation||How to sign digital streams|
|1||Alfred J. Menezes, et al., Chapter 9: Hash Functions and Data Integrity, Handbook of Applied Cryptography, CRC Press, 1997, pp. 321-383.|
|2||Alfred J. Menzes, et al., Chapter 11: Digital Signatures, Handbook of Applied Cryptography, CRC Press, 1997, pp. 425-488.|
|3||Moni Naor, et al., Universal One-Way Hash Functions and their Cryptographic Applications, Proceedings of the Twenty First Annual ACM Symposium on Theory of Computing (May 15-17, 1989), ACM Press, 1989, pp. 33-43.|
|4||Rohtagi, P., "A Compact and Fast Hybrid Signature Scheme for Multicase Packet Authentication", 6<SUP>th </SUP>ACM Conference on Computer and Communications Security, Nov. 1999, pp. 93-100.|
|5||Rosario Gennaro, et al., How to Sign Digital Streams, Advances in Cryptology-CRYPTO '97 (Aug. 17-21, 1997), vol. 1294 of Lecture Notes, Springer-Verlag, 1998, pp. 180-197.|
|6||*||Schneier, Bruce, "Applied Cryptography second edition" 1996 ISBN 0-471-11709-9 pp. 433, 434.|
|7||Stuart Haber, et al., How to Time-Stamp a Digital Document, Advances in Cryptography-Crypto '90, Springer-Verlag, 1991, pp. 437-455.|
|8||Wong, C.K., et al., "Digital Signatures for Flows and Multicasts", Proceedings of IEEE ICNP '98, 1998, 12 pages.|
|Citing Patent||Filing date||Publication date||Applicant||Title|
|US7210134||Sep 6, 2002||Apr 24, 2007||Sonic Solutions||Deterring reverse-engineering of software systems by randomizing the siting of stack-based data|
|US7302467 *||Aug 7, 2001||Nov 27, 2007||Sony Corporation||Information processing device and information processing method, service providing system, and computer-executable program for the same|
|US7315866 *||Oct 1, 2004||Jan 1, 2008||Agency For Science, Technology And Research||Method for incremental authentication of documents|
|US7340602||Apr 22, 2005||Mar 4, 2008||Intertrust Technologies Corp.||Systems and methods for authenticating and protecting the integrity of data streams and other data|
|US7373464 *||May 24, 2005||May 13, 2008||Data Domain, Inc.||Efficient data storage system|
|US7475254 *||Jun 19, 2003||Jan 6, 2009||International Business Machines Corporation||Method for authenticating software using protected master key|
|US7533412 *||Apr 18, 2003||May 12, 2009||Stmicroelectronics S.A.||Processor secured against traps|
|US7639818 *||Sep 17, 2004||Dec 29, 2009||Ntt Docomo, Inc.||Structured document signature device, structured document adaptation device and structured document verification device|
|US7640480 *||Apr 4, 2006||Dec 29, 2009||Siemens Aktiengesellschaft||Detection of errors in the communication of data|
|US7657756 *||Oct 8, 2004||Feb 2, 2010||International Business Machines Corporaiton||Secure memory caching structures for data, integrity and version values|
|US7707481 *||May 16, 2006||Apr 27, 2010||Pitney Bowes Inc.||System and method for efficient uncorrectable error detection in flash memory|
|US7751556 *||Jul 10, 2002||Jul 6, 2010||Sharp Kabushiki Kaisha||Apparatus and method of generating falsification detecting data of encrypted data in the course of process|
|US7770021||Nov 26, 2008||Aug 3, 2010||International Business Machines Corporation||Authenticating software using protected master key|
|US7779270||May 13, 2005||Aug 17, 2010||Intertrust Technologies Corporation||Software self-defense systems and methods|
|US7779394||May 11, 2005||Aug 17, 2010||Intertrust Technologies Corporation||Software self-defense systems and methods|
|US7809138||Nov 19, 2003||Oct 5, 2010||Intertrust Technologies Corporation||Methods and apparatus for persistent control and protection of content|
|US7814129||Mar 10, 2006||Oct 12, 2010||Ross Neil Williams||Method and apparatus for storing data with reduced redundancy using data clusters|
|US7823135||Apr 7, 2005||Oct 26, 2010||Intertrust Technologies Corporation||Software self-defense systems and methods|
|US7831998 *||Sep 13, 2006||Nov 9, 2010||Ntt Docomo, Inc.||Changing states of communication links in computer networks in an authenticated manner|
|US7836394 *||Apr 18, 2006||Nov 16, 2010||Savanet Llc||Interactive, customizable display and analysis of electronically tagged financial information|
|US7844835||Sep 20, 2005||Nov 30, 2010||Intertrust Technologies Corporation||Systems and methods for secure transaction management and electronic rights protection|
|US7865722 *||Jul 22, 2003||Jan 4, 2011||Agency For Science, Technology And Research||Method of identifying an object and a tag carrying identification information|
|US7882351||Feb 27, 2008||Feb 1, 2011||Intertrust Technologies Corp.||Systems and methods for authenticating and protecting the integrity of data streams and other data|
|US7882358||Jan 15, 2007||Feb 1, 2011||Microsoft Corporation||Reversible hashing for E-signature verification|
|US7917749||May 22, 2006||Mar 29, 2011||Intertrust Technologies Corporation||Systems and methods for secure transaction management and electronic rights protection|
|US7925898||Jun 14, 2006||Apr 12, 2011||Intertrust Technologies Corp.||Systems and methods using cryptography to protect secure computing environments|
|US7933208 *||Sep 27, 2005||Apr 26, 2011||Polytechnic Institute Of New York University||Facilitating storage and querying of payload attribution information|
|US7937593 *||Aug 6, 2004||May 3, 2011||Broadcom Corporation||Storage device content authentication|
|US7949132 *||Jun 8, 2007||May 24, 2011||Microsoft Corporation||Modular architecture to unify the playback of DVD technologies|
|US7949877 *||Nov 21, 2003||May 24, 2011||Realnetworks, Inc.||Rights enforcement and usage reporting on a client device|
|US7958364 *||Nov 15, 2007||Jun 7, 2011||Hong Fu Jin Precision Industry (Shenzhen) Co., Ltd.||System and method for digitally signing electronic documents|
|US8010873||Apr 20, 2010||Aug 30, 2011||Pitney Bowes Inc.||Systems and methods for efficient uncorrectable error detection in flash memory|
|US8019988 *||Aug 22, 2006||Sep 13, 2011||The State Of Oregon Acting By And Through The State Board Of Higher Education On Behalf Of The University Of Oregon||Security protocols for hybrid peer-to-peer file sharing networks|
|US8028159 *||Aug 19, 2008||Sep 27, 2011||The State Of Oregon Acting By And Through The State Board Of Higher Education On Behalf Of The University Of Oregon||Security protocols for hybrid peer-to-peer file sharing networks|
|US8037312||Nov 15, 2007||Oct 11, 2011||Fujitsu Limited||Method and apparatus for digital signature authentication, and computer product|
|US8051252||Mar 10, 2006||Nov 1, 2011||Ross Neil Williams||Method and apparatus for detecting the presence of subblocks in a reduced-redundancy storage system|
|US8074049||Jun 24, 2009||Dec 6, 2011||Nine Technology, Llc||Online backup system with global two staged deduplication without using an indexing database|
|US8077679||Oct 24, 2001||Dec 13, 2011||Qualcomm Incorporated||Method and apparatus for providing protocol options in a wireless communication system|
|US8078692 *||May 25, 2005||Dec 13, 2011||Sagem Defense Securite||Method of loading files from a client to a target server and device for implementing the method|
|US8090950 *||Apr 8, 2004||Jan 3, 2012||NexTenders (India) Pvt. Ltd.||System and method for authenticating documents|
|US8098818||Jul 7, 2003||Jan 17, 2012||Qualcomm Incorporated||Secure registration for a multicast-broadcast-multimedia system (MBMS)|
|US8099324 *||Jun 20, 2007||Jan 17, 2012||Microsoft Corporation||Securely providing advertising subsidized computer usage|
|US8121296||Aug 20, 2001||Feb 21, 2012||Qualcomm Incorporated||Method and apparatus for security in a data processing system|
|US8131998 *||Mar 5, 2008||Mar 6, 2012||George Mason Intellectual Properties, Inc.||Transparent authentication of continuous data streams|
|US8140824 *||Mar 15, 2007||Mar 20, 2012||International Business Machines Corporation||Secure code authentication|
|US8166308 *||Jul 18, 2007||Apr 24, 2012||Certicom Corp.||System and method for authenticating a gaming device|
|US8185473||Apr 13, 2006||May 22, 2012||Intertrust Technologies Corporation||Trusted infrastructure support systems, methods and techniques for secure electronic commerce, electronic transactions, commerce process control and automation, distributed computing, and rights management|
|US8190915 *||Jun 14, 2006||May 29, 2012||Oracle International Corporation||Method and apparatus for detecting data tampering within a database|
|US8214607||Jul 7, 2011||Jul 3, 2012||Ross Neil Williams||Method and apparatus for detecting the presence of subblocks in a reduced-redundancy storage system|
|US8256015||Sep 16, 2009||Aug 28, 2012||Ntt Docomo, Inc.||Method and apparatus for authentication of data streams with adaptively controlled losses|
|US8301884 *||Sep 16, 2003||Oct 30, 2012||Samsung Electronics Co., Ltd.||Method of managing metadata|
|US8307161||Oct 22, 2008||Nov 6, 2012||Sandisk Il Ltd.||Caching for structural integrity schemes|
|US8307212||Jul 10, 2003||Nov 6, 2012||Intertrust Technologies Corp.||Steganographic techniques for securely delivering electronic digital rights management control information over insecure communication channels|
|US8332617||Oct 7, 2011||Dec 11, 2012||Imation Corp.||Online backup system with global two staged deduplication without using an indexing database|
|US8356021 *||Mar 10, 2006||Jan 15, 2013||Ross Neil Williams||Method and apparatus for indexing in a reduced-redundancy storage system|
|US8364965 *||Mar 15, 2006||Jan 29, 2013||Apple Inc.||Optimized integrity verification procedures|
|US8380041 *||Jul 5, 2002||Feb 19, 2013||Tivo Inc.||Transportable digital video recorder system|
|US8407382||Oct 17, 2011||Mar 26, 2013||Imation Corp.||Commonality factoring for removable media|
|US8495035||Oct 23, 2008||Jul 23, 2013||Sandisk Il Ltd.||Systems and methods for providing data integrity protection in a storage medium|
|US8510570 *||Jan 24, 2012||Aug 13, 2013||Certicom Corp.||System and method for authenticating a gaming device|
|US8533851||Apr 12, 2006||Sep 10, 2013||Intertrust Technologies Corporation||Systems and methods for secure transaction management and electronic rights protection|
|US8543842||May 23, 2006||Sep 24, 2013||Intertrust Technologies Corporation||System and methods for secure transaction management and electronics rights protection|
|US8555071||Oct 31, 2007||Oct 8, 2013||Samsung Electronics Co., Ltd.||Method of managing metadata|
|US8577680||Dec 30, 2006||Nov 5, 2013||Emc Corporation||Monitoring and logging voice traffic on data network|
|US8607072||Apr 26, 2011||Dec 10, 2013||Broadcom Corporation||Storage device content authentication|
|US8627071 *||Apr 29, 2005||Jan 7, 2014||Netapp, Inc.||Insuring integrity of remote procedure calls used in a client and server storage system|
|US8645710 *||Aug 30, 2005||Feb 4, 2014||Sony Corporation||Information processing apparatus, information storage medium, content management system, data processing method, and computer program|
|US8713400||Jan 6, 2010||Apr 29, 2014||Qualcomm Incorporated||Method and system for reduction of decoding complexity in a communication system|
|US8718279||Jun 16, 2004||May 6, 2014||Qualcomm Incorporated||Apparatus and method for a secure broadcast system|
|US8724803 *||Sep 1, 2004||May 13, 2014||Qualcomm Incorporated||Method and apparatus for providing authenticated challenges for broadcast-multicast communications in a communication system|
|US8730999||Jun 18, 2010||May 20, 2014||Qualcomm Incorporated||Method and system for reduction of decoding complexity in a communication system|
|US8751793||Dec 2, 2003||Jun 10, 2014||Intertrust Technologies Corp.||Trusted infrastructure support systems, methods and techniques for secure electronic commerce transaction and rights management|
|US8762711||Jan 31, 2011||Jun 24, 2014||Intertrust Technologies Corporation||Systems and methods for authenticating and protecting the integrity of data streams and other data|
|US8769614 *||Dec 29, 2010||Jul 1, 2014||Akamai Technologies, Inc.||Security framework for HTTP streaming architecture|
|US8782422||Dec 22, 2011||Jul 15, 2014||Nextenders (India) Private, Ltd.||System and method for authenticating documents|
|US8788841 *||Oct 23, 2008||Jul 22, 2014||Samsung Electronics Co., Ltd.||Representation and verification of data for safe computing environments and systems|
|US8812859 *||Jul 16, 2008||Aug 19, 2014||Bce Inc.||Method, system and apparatus for accessing a resource based on data supplied by a local user|
|US8850606 *||Feb 1, 2010||Sep 30, 2014||Fuji Xerox Co., Ltd.||Computer readable medium storing program, information processing apparatus, and information processing method for document security|
|US8886947||Dec 20, 2012||Nov 11, 2014||Apple Inc.||Optimized integrity verification procedures|
|US8914903||Mar 12, 2010||Dec 16, 2014||Amdocs Software System Limited||System, method, and computer program for validating receipt of digital content by a client device|
|US8954751||Nov 4, 2004||Feb 10, 2015||International Business Machines Corporation||Secure memory control parameters in table look aside buffer data fields and support memory array|
|US8971790||Aug 28, 2009||Mar 3, 2015||Qualcomm Incorporated||Method and apparatus for broadcast services in a communication system|
|US8973152 *||Mar 30, 2010||Mar 3, 2015||Anastasis Co., Ltd||Apparatus and method for guaranteeing integrity of real-time vehicle data and vehicle black box system using the same|
|US8983065||Feb 28, 2008||Mar 17, 2015||Qualcomm Incorporated||Method and apparatus for security in a data processing system|
|US9037867||Dec 20, 2013||May 19, 2015||Sony Corporation||Information processing apparatus, information storage medium, content management system, data processing method, and computer program|
|US9100457||Aug 20, 2001||Aug 4, 2015||Qualcomm Incorporated||Method and apparatus for transmission framing in a wireless communication system|
|US9141558||Nov 7, 2014||Sep 22, 2015||International Business Machines Corporation||Secure memory control parameters in table look aside buffer data fields and support memory array|
|US9152706||Sep 14, 2012||Oct 6, 2015||Emc Corporation||Anonymous identification tokens|
|US9224168||Dec 11, 2012||Dec 29, 2015||Microsoft Technology Licensing, Llc||Tuning product policy using observed evidence of customer behavior|
|US9336359||Feb 6, 2012||May 10, 2016||Microsoft Technology Licensing, Llc||Device certificate individualization|
|US9401896||Jun 13, 2014||Jul 26, 2016||Intertrust Technologies Corporation||Systems and methods for authenticating and protecting the integrity of data streams and other data|
|US9401921||Dec 24, 2013||Jul 26, 2016||Netapp, Inc.||Insuring integrity of remote procedure calls used in a client and server storage system|
|US9485238 *||Jun 4, 2014||Nov 1, 2016||Akamai Technologies, Inc.||Security framework for HTTP streaming architecture|
|US9497205 *||Jun 30, 2008||Nov 15, 2016||Emc Corporation||Global commonality and network logging|
|US20020082905 *||Aug 7, 2001||Jun 27, 2002||Satoru Matsuda||Information processing device and information processing method, service providing system, and computer-executable program for the same|
|US20030026589 *||Jul 5, 2002||Feb 6, 2003||Barton James M.||Smart card digital video recorder system|
|US20030084298 *||Oct 25, 2001||May 1, 2003||Messerges Thomas S.||Method for efficient hashing of digital content|
|US20030140229 *||Dec 21, 2000||Jul 24, 2003||Heins Kersten W.||Method and device for verifying a file|
|US20030145214 *||Jan 28, 2003||Jul 31, 2003||Kabushiki Kaisha Toshiba||Communication device and communication control device with limited copyright protection range|
|US20040098608 *||Apr 18, 2003||May 20, 2004||Yannick Teglia||Processor secured against traps|
|US20040107356 *||Nov 19, 2003||Jun 3, 2004||Intertrust Technologies Corp.||Methods and apparatus for persistent control and protection of content|
|US20040123109 *||Sep 16, 2003||Jun 24, 2004||Samsung Electronics Co., Ltd.||Method of managing metadata|
|US20040172543 *||Jul 10, 2002||Sep 2, 2004||Katsuhiko Sato||Apparatus and method for generating data for detecting false alteration of encrypted data during processing|
|US20040264927 *||Jun 30, 2003||Dec 30, 2004||Microsoft Corporation||Modular architecture to unify the playback of DVD technologies|
|US20050010788 *||Jun 19, 2003||Jan 13, 2005||International Business Machines Corporation||System and method for authenticating software using protected master key|
|US20050017082 *||Jul 22, 2003||Jan 27, 2005||Agency For Science, Technology And Research||Method of identifying an object and a tag carrying identification information|
|US20050022025 *||Nov 21, 2003||Jan 27, 2005||Hug Joshua D.||Rights enforcement and usage reporting on a client device|
|US20050050342 *||Aug 13, 2003||Mar 3, 2005||International Business Machines Corporation||Secure storage utility|
|US20050060584 *||Jul 22, 2004||Mar 17, 2005||Intertrust Technologies Corp.||Trusted infrastructure support systems, methods and techniques for secure electronic commerce, electronic transactions, commerce process control and automation, distributed computing, and rights management|
|US20050063545 *||Sep 17, 2004||Mar 24, 2005||Ntt Docomo, Inc||Structured document signature device, structured document adaptation device and structured document verification device|
|US20050091261 *||Oct 1, 2004||Apr 28, 2005||Agency For Science, Technology And Research||Method for incremental authentication of documents|
|US20050091545 *||Feb 24, 2003||Apr 28, 2005||Andrea Soppera||Lightweight authentication of information|
|US20050183072 *||Apr 7, 2005||Aug 18, 2005||Intertrust Technologies Corporation||Software self-defense systems and methods|
|US20050204348 *||May 13, 2005||Sep 15, 2005||Inter Trust Technologies Corporation||Software self-defense systems and methods|
|US20050210275 *||May 11, 2005||Sep 22, 2005||Intertrust Technologies Corporation||Software self-defense systems and methods|
|US20050216669 *||May 24, 2005||Sep 29, 2005||Data Domain, Inc.||Efficient data storage system|
|US20050235154 *||Apr 22, 2005||Oct 20, 2005||Intertrust Technologies Corp.||Systems and methods for authenticating and protecting the integrity of data streams and other data|
|US20050267860 *||May 25, 2005||Dec 1, 2005||Laurent Benguigui||Method of loading files from a client to a target server and device for implementing the method|
|US20050281406 *||Aug 9, 2005||Dec 22, 2005||Nagravision S.A.||Method and device to guarantee the integrity and authenticity of a set of data|
|US20060036853 *||Aug 6, 2004||Feb 16, 2006||Sherman Chen||Storage device content authentication|
|US20060072582 *||Sep 27, 2005||Apr 6, 2006||Herve Bronnimann||Facilitating storage and querying of payload attribution information|
|US20060075507 *||Sep 30, 2005||Apr 6, 2006||Sonic Solutions||Secure protocols for use with microsoft directshow filters|
|US20060080553 *||Oct 8, 2004||Apr 13, 2006||International Business Machines Corporation||Secure memory caching structures for data, integrity and version values|
|US20060095793 *||Nov 4, 2004||May 4, 2006||International Business Machines Corporation||Secure memory control parameters in table look aside buffer data fields and support memory array|
|US20060136728 *||Aug 4, 2004||Jun 22, 2006||Gentry Craig B||Method and apparatus for authentication of data streams with adaptively controlled losses|
|US20060242535 *||Apr 4, 2006||Oct 26, 2006||Siemens Aktiengesellschaft||Detection of errors in the communication of data|
|US20060271540 *||Mar 10, 2006||Nov 30, 2006||Williams Ross N||Method and apparatus for indexing in a reduced-redundancy storage system|
|US20060282457 *||Mar 10, 2006||Dec 14, 2006||Williams Ross N||Method and apparatus for storing data with reduced redundancy using data clusters|
|US20070169177 *||Sep 13, 2006||Jul 19, 2007||Ntt Docomo, Inc.||Changing states of communication links in computer networks in an authenticated manner|
|US20070192548 *||Mar 10, 2006||Aug 16, 2007||Williams Ross N||Method and apparatus for detecting the presence of subblocks in a reduced-redundancy storage system|
|US20070220261 *||Mar 15, 2006||Sep 20, 2007||Farrugia Augustin J||Optimized integrity verification procedures|
|US20070234431 *||Jun 8, 2007||Oct 4, 2007||Microsoft Corporation||Modular Architecture to Unify the Playback of DVD Technologies|
|US20070244775 *||Apr 18, 2006||Oct 18, 2007||Macro Val Llc||Interactive, customizable display and analysis of electronically tagged financial information|
|US20070244820 *||Jun 20, 2007||Oct 18, 2007||Microsoft Corporation||Securely Providing Advertising Subsidized Computer Usage|
|US20070277037 *||Sep 6, 2002||Nov 29, 2007||Randy Langer||Software component authentication via encrypted embedded self-signatures|
|US20070283158 *||Jun 2, 2006||Dec 6, 2007||Microsoft Corporation Microsoft Patent Group||System and method for generating a forensic file|
|US20070283224 *||May 16, 2006||Dec 6, 2007||Pitney Bowes Incorporated||System and method for efficient uncorrectable error detection in flash memory|
|US20070294205 *||Jun 14, 2006||Dec 20, 2007||Xu Mingkang||Method and apparatus for detecting data tampering within a database|
|US20080016576 *||Aug 30, 2005||Jan 17, 2008||Sony Corporation||Information Processing Apparatus, Information Storage Medium, Content Management System, Data Processing Method, And Computer Program|
|US20080028235 *||Jul 18, 2007||Jan 31, 2008||Keelan Smith||System and method for authenticating a gaming device|
|US20080028439 *||Apr 8, 2004||Jan 31, 2008||Ravindra Waman Shevade||System and Method for Authenticating Documents|
|US20080072054 *||Oct 31, 2007||Mar 20, 2008||Samsung Electronics Co., Ltd.||Method of managing metadata|
|US20080104403 *||Sep 29, 2006||May 1, 2008||Shay Gueron||Methods and apparatus for data authentication with multiple keys|
|US20080159146 *||Dec 30, 2006||Jul 3, 2008||Emc Corporation||Network monitoring|
|US20080162135 *||Dec 30, 2006||Jul 3, 2008||Emc Corporation||Analyzing network traffic|
|US20080172560 *||Jan 15, 2007||Jul 17, 2008||Microsoft Corporation||Reversible Hashing for E-Signature Verification|
|US20080222414 *||Mar 5, 2008||Sep 11, 2008||Xinyuan Wang||Transparent Authentication of Continuous Data Streams|
|US20080222420 *||Feb 27, 2008||Sep 11, 2008||Intertrust Technologies Corp.||Systems and Methods for Authenticating and Protecting the Integrity of Data Streams and Other Data|
|US20080229055 *||Mar 15, 2007||Sep 18, 2008||Craft David J||Hardware-Based Secure Code Authentication|
|US20080256362 *||Nov 15, 2007||Oct 16, 2008||Fujitsu Limited||Method and apparatus for digital signature authentication, and computer product|
|US20090006853 *||Aug 19, 2008||Jan 1, 2009||The State Of Oregon Acting By And Through The State Board Of Higher Education On Behalf Of The U||Security protocols for hybrid peer-to-peer file sharing networks|
|US20090024853 *||Jul 16, 2008||Jan 22, 2009||Tet Hin Yeap||Method, system and apparatus for accessing a resource based on data supplied by a local user|
|US20090044019 *||Nov 15, 2007||Feb 12, 2009||Hong Fu Jin Precision Industry (Shenzhen) Co., Ltd.||System and method for digitally signing electronic documents|
|US20090055357 *||May 30, 2008||Feb 26, 2009||Honeywell International Inc.||Data integrity checking for set-oriented data stores|
|US20090113215 *||Oct 23, 2008||Apr 30, 2009||Sandisk Il Ltd.||Fast update for hierarchical integrity schemes|
|US20090162032 *||Dec 21, 2007||Jun 25, 2009||Aceurity, Inc.||Smart Viewing Rights System and Switch|
|US20090259847 *||Aug 22, 2006||Oct 15, 2009||The State Of Oregon Acting By And Through The State Board Of Higher Education On Behalf Of The U||Security protocols for hybrid peer-to-peer file sharing networks|
|US20100005309 *||Sep 16, 2009||Jan 7, 2010||Gentry Craig B||Method and apparatus for authentication of data streams with adaptively controlled losses|
|US20100005310 *||Sep 16, 2009||Jan 7, 2010||Gentry Craig B||Method and apparatus for authenication of data streams with adaptively controlled losses|
|US20100058013 *||Jun 24, 2009||Mar 4, 2010||Vault Usa, Llc||Online backup system with global two staged deduplication without using an indexing database|
|US20100106976 *||Oct 23, 2008||Apr 29, 2010||Samsung Electronics Co., Ltd.||Representation and verification of data for safe computing environments and systems|
|US20100107041 *||Jan 6, 2010||Apr 29, 2010||Qualcomm Incorporated||Method and system for reduction of decoding complexity in a communication system|
|US20100281323 *||Mar 26, 2010||Nov 4, 2010||Samsung Electronics Co., Ltd.||Control and data channels for advanced relay operation|
|US20110016535 *||Feb 1, 2010||Jan 20, 2011||Fuji Xerox Co., Ltd.||Computer readable medium storing program, information processing apparatus, and information processing method|
|US20110202776 *||Apr 26, 2011||Aug 18, 2011||Broadcom Corporation||Storage Device Content Authentication|
|US20120131322 *||Jan 24, 2012||May 24, 2012||Certicom Corp.||System and Method for Authenticating a Gaming Device|
|US20120222130 *||Mar 30, 2010||Aug 30, 2012||Dong-Hoon Lee||Apparatus and method for guaranteeing integrity of real-time vehicle data and vehicle black box system using the same|
|US20140337958 *||Jun 4, 2014||Nov 13, 2014||Akamai Technologies, Inc.||Security framework for http streaming architecture|
|US20160099939 *||Feb 26, 2015||Apr 7, 2016||Hyundai Motor Company||Method of authenticating can packets using mixture of macs and apparatus for implementing the same|
|EP2107711A1 *||Mar 3, 2008||Oct 7, 2009||Fujitsu Ltd.||Method and apparatus for digital signature authentication, and computer product|
|WO2009057092A1 *||Oct 22, 2008||May 7, 2009||Sandisk Il Ltd.||Caching for structural integrity schemes|
|WO2009057096A1 *||Oct 22, 2008||May 7, 2009||Sandisk Il Ltd||Fast update for hierarchical integrity schemes|
|U.S. Classification||713/176, 713/168, 713/161|
|International Classification||H04L9/00, G06F21/00, H04L9/32|
|Cooperative Classification||G06F2221/2149, G06F21/64, H04L63/0428, G06F21/53, H04L9/3236, H04L2209/603, H04L2209/30, H04L2209/38|
|European Classification||G06F21/64, H04L9/32N, H04L9/32L|
|Jul 25, 2000||AS||Assignment|
Owner name: INTERTRUST TECHNOLOGIES CORP., CALIFORNIA
Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:SERRET-AVILA, XAVIER;REEL/FRAME:010956/0818
Effective date: 20000720
|Apr 11, 2006||CC||Certificate of correction|
|Apr 27, 2009||FPAY||Fee payment|
Year of fee payment: 4
|Mar 14, 2013||FPAY||Fee payment|
Year of fee payment: 8